$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json) Hash identifier: UXIEEs0cnvMcVRyV1BRVga+cL5vrnF1zPcNMlpB3aQ4= Subject key identifier: 1D:9D:FD:06:5A:CD:F5:88:E3:91:1F:FD:C2:67:B9:96:A4:9A:A7:CB Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft Manifest number: 01FA Signing time: Sun 19 Oct 2025 04:51:56 +0000 Manifest this update: Sun 19 Oct 2025 04:51:55 +0000 Manifest next update: Sun 26 Oct 2025 04:51:55 +0000 Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: JxnRBn7ko/CKlg3Irtrvg2Hbo3CRZwQsB6OBEtzqfDI=) 2: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: kKiJiJDzeIyQzgTjMAe9Lk1kOFbiYohKDFsKrxG/BWs=) 3: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: sZLM9dSUcucufQMax9H1Edh8mrh+cYvOCFePwEcH86c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Validity Not Before: Oct 19 04:51:55 2025 GMT Not After : Oct 26 04:51:55 2025 GMT Subject: CN=68f46e6b-c532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3a:f6:46:66:c2:45:42:4a:78:07:39:0b:f0: 3c:0e:2f:64:96:b0:c7:7e:cf:9d:b9:75:21:90:40: f4:b6:aa:38:d2:3e:cd:67:b0:93:a9:15:4c:fd:bf: 43:01:78:fc:50:39:51:f0:21:65:26:8c:11:6b:d7: 07:43:83:66:e2:e4:f2:bd:a2:1d:34:76:bd:36:68: fd:ac:a9:48:63:e5:28:77:2c:fc:27:02:e1:99:b0: e6:1d:5d:b0:a7:74:50:6e:8b:48:75:f6:9f:7e:29: 3c:73:28:6a:33:a7:81:57:1e:b9:9b:28:0e:3c:a8: e6:c0:60:d1:29:fb:e0:66:b4:71:ee:5d:de:8b:99: 48:01:ce:bd:42:82:88:c5:17:0a:dc:09:1a:e3:26: 4d:4d:27:b6:2b:e5:60:4d:c6:72:38:c4:25:87:f2: 4b:76:95:9a:2c:8e:b9:23:90:9c:0c:3b:79:80:31: 4b:6f:01:f3:44:54:1b:b0:20:66:de:5d:72:3e:2d: db:0f:17:69:36:a7:b2:b2:f9:6a:5e:fc:b5:71:b4: 04:2e:d0:c8:db:9f:c9:f6:59:d7:e7:17:43:d2:b6: 57:70:6d:28:c3:24:58:4b:32:c3:b8:a2:f8:c9:b4: d9:f4:a3:df:1f:9e:6e:d5:75:d3:1c:f0:a7:e4:de: 8b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9D:FD:06:5A:CD:F5:88:E3:91:1F:FD:C2:67:B9:96:A4:9A:A7:CB X509v3 Authority Key Identifier: keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:33:65:91:0f:20:15:6c:eb:59:ff:fb:42:81:b4:c2:22:c0: 5e:3f:37:64:d7:77:1b:71:ee:ce:35:ac:b7:62:aa:0a:33:8d: 67:db:38:05:45:9c:ae:66:74:1d:68:b8:95:51:69:49:a1:5c: 81:72:b7:83:82:f4:0e:16:1c:bc:7c:30:aa:3e:ba:13:9c:e1: df:4f:9e:53:1c:09:76:00:f7:37:a7:08:ac:d5:b7:6b:7a:5e: 9e:65:f2:90:42:c7:b8:72:da:1d:d9:29:16:1d:8f:d4:78:a0: ec:8e:ba:9c:cd:57:2c:65:98:2c:7d:b5:77:51:ae:49:0e:a0: b0:71:25:70:c9:cc:1f:fa:d3:42:85:67:ab:9c:63:6e:50:f9: ff:aa:a4:3c:40:3d:c3:6b:c9:53:f4:05:ba:05:13:60:1e:a2: 23:6f:71:fb:98:2c:29:56:ae:22:84:2e:28:e6:5f:eb:9f:d9: 90:fe:9e:08:f8:be:81:23:11:5b:f6:1d:30:71:c6:b0:88:49: c9:9f:25:78:23:34:e5:24:17:2e:2c:96:70:01:b6:0c:09:74: 2a:8c:64:d1:e0:3a:ed:6e:24:d9:0a:61:94:9c:aa:c7:5f:94: 25:ed:d3:a4:f2:25:6c:ff:fe:5a:6f:90:bf:c0:89:d7:6f:17: 86:1b:d3:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyNDYxMTAvBgNVBAUTKDRBMTg4RTMxODdDRUM1RDM2QzM2OEMyNEU5NEY0MzFE MDQyNTNCN0IwHhcNMjUxMDE5MDQ1MTU1WhcNMjUxMDI2MDQ1MTU1WjAYMRYwFAYD VQQDEw02OGY0NmU2Yi1jNTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjr2RmbCRUJKeAc5C/A8Di9klrDHfs+duXUhkED0tqo40j7NZ7CTqRVM/b9D AXj8UDlR8CFlJowRa9cHQ4Nm4uTyvaIdNHa9Nmj9rKlIY+Uodyz8JwLhmbDmHV2w p3RQbotIdfaffik8cyhqM6eBVx65mygOPKjmwGDRKfvgZrRx7l3ei5lIAc69QoKI xRcK3Aka4yZNTSe2K+VgTcZyOMQlh/JLdpWaLI65I5CcDDt5gDFLbwHzRFQbsCBm 3l1yPi3bDxdpNqeysvlqXvy1cbQELtDI25/J9lnX5xdD0rZXcG0owyRYSzLDuKL4 ybTZ9KPfH55u1XXTHPCn5N6LMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2d/QZa zfWI45Ef/cJnuZakmqfLMB8GA1UdIwQYMBaAFEoYjjGHzsXTbDaMJOlPQx0EJTt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI0Ni8zOEM5NzA4QUIx MDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hkTnNOb3drNlU5REhRUWxP M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoaU9NWWZPeGROc05vd2s2VTlESFFRbE8zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI0Ni8zOEM5NzA4QUIxMDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hk TnNOb3drNlU5REhRUWxPM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCM2WRDyAVbOtZ//tCgbTCIsBePzdk13cbce7ONay3YqoKM41n2zgF RZyuZnQdaLiVUWlJoVyBcreDgvQOFhy8fDCqProTnOHfT55THAl2APc3pwis1bdr el6eZfKQQse4ctod2SkWHY/UeKDsjrqczVcsZZgsfbV3Ua5JDqCwcSVwycwf+tNC hWernGNuUPn/qqQ8QD3Da8lT9AW6BRNgHqIjb3H7mCwpVq4ihC4o5l/rn9mQ/p4I +L6BIxFb9h0wccawiEnJnyV4IzTlJBcuLJZwAbYMCXQqjGTR4DrtbiTZCmGUnKrH X5Ql7dOk8iVs//5ab5C/wInXbxeGG9PG -----END CERTIFICATE-----Generated at Tue Oct 21 01:04:03 2025 by rpki-client